Verot Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Verot Project records in CISA KEV

No Verot Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Verot 2 records MEDIUM

Records

2 records

TI-2019-14102 CVE-2019-19576 · GHSA-r5gm-4p5w-pq2p

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in…

MEDIUM 64

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2638 Published 2019-12-04 Fixed in 1.0.3, 2.0.4 CWE-434

TI-2019-14148 CVE-2019-19634 · GHSA-2gc7-w4hw-rr2m

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used…

MEDIUM 49

class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-201…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04187 Published 2019-12-17 No fix listed CWE-434

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0